[ILUG] Where do these dropped packets come from?

[Paul Jakma]

On Mon, 2 May 2005, Ronan Cunniffe wrote:

> Just curious: why not simply have a policy of DROP, and write 
> ACCEPT rules for traffic that you specifically want (and more 
> particularly, use --state ESTABLISHED rules to discard anything 
> uninvited)?

That's what I do.

I LOG then REJECT packets by default. I have an 'accepts' chain 
before that to accept certain stuff.

The point is to kill crap /before/ it hits the LOG rule, so my logs 
aren't polluted by the noise of crud.

regards,
-- 
Paul Jakma	paul at clubi.ie	paul at jakma.org	Key ID: 64A2FF6A
Fortune:
Like punning, programming is a play on words.